Static task
static1
Behavioral task
behavioral1
Sample
700b2d85ba95d98dad183126a842edb6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
700b2d85ba95d98dad183126a842edb6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
700b2d85ba95d98dad183126a842edb6_JaffaCakes118
-
Size
31KB
-
MD5
700b2d85ba95d98dad183126a842edb6
-
SHA1
6c520285dcc784b98414447790beb52707832e9e
-
SHA256
3954619e6633d83567684da14f79b3d4f1f9cdf95719b274b1520e927462f0eb
-
SHA512
708474ad3704f9a70472882a3dea819bf98e1a9c7af178228f151364f085cafa9426b6f8dd109bd3c5e8fdb822a8e9082373c1beaef2351324f7b48cede9a8e5
-
SSDEEP
768:UspB5hTJy9ens5gPBepfT8dZOh10Ho11z:UspB5h09en/4N8dZZHw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 700b2d85ba95d98dad183126a842edb6_JaffaCakes118
Files
-
700b2d85ba95d98dad183126a842edb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
CODE Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sinaps Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE